CVE-2020-2200

https://notcve.org/view.php?id=CVE-2020-2200

03 Jun 2020 — Jenkins Play Framework Plugin 1.0.2 and earlier lets users specify the path to the `play` command on the Jenkins master for a form validation endpoint, resulting in an OS command injection vulnerability exploitable by users able to store such a file on the Jenkins master. Jenkins Play Framework Plugin versiones 1.0.2 y anteriores, permiten a los usuarios especificar la ruta para el comando "play" en el maestro Jenkins para un endpoint de comprobación de formulario, resultando en una vulnerabilidad de inyecc... • http://www.openwall.com/lists/oss-security/2020/06/03/3 • CWE-78: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') •